Privacy Policy
Review copy. Operator and contact details have not been finalized.
1. Who handles your data
The CLUTIVO operating entity is responsible for platform data processing. Its legal identity, registered address and privacy contact must be supplied and reviewed before this policy becomes effective.
2. Data we use
Account data includes sign-in identifiers, email, your chosen public name and account/security status. Competitive records include game participation, moves, results, ratings and season achievements. Security records include access, integrity evidence and audit events. Support requests contain the email and message you submit.
3. Purposes and legal bases
Account and game data are used to deliver the service you request. Necessary security and integrity processing protects accounts and fair competition; its legitimate-interest assessment must be documented. Legal obligations may require specific records. Optional tracking or marketing would require a separately assessed legal basis and appropriate choices before activation.
4. Public and private information
Your public player name and competitive rating may appear to opponents and on leaderboards. Your email and privileged security, support and compliance records are not public leaderboard data. Do not put private information in your public name.
5. Providers and international transfers
Authentication and infrastructure use Supabase, Google, Vercel and Railway as applicable to the selected login and hosting arrangements. Processing locations, subprocessors and any required international-transfer safeguards must be confirmed for the operating entity and actual contracts before release.
6. Retention
Competitive and audit records support integrity, disputes and accountable operation. Personal data must not be kept longer than necessary for its documented purpose or applicable obligations. A category-specific retention schedule, including support requests and security evidence, must be approved before release.
7. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to processing. Withdrawal of consent applies where processing relies on consent. Some integrity or legal records may need to be retained; requests receive an explanation rather than an automatic history rewrite. You may complain to the competent data protection authority, including the Hellenic Data Protection Authority where applicable.
8. Contact and account security
Use Support for a recorded privacy request; identity checks may be needed before disclosing or changing account information. Do not send passwords, authenticator codes or identity documents through an ordinary support message.